MCSE Microsoft MCSE: 70-290 2 — Questions and Answers
Question 1: A user in the Sales OU cannot log on to any domain computer after a password reset. Other users in the same OU log on successfully. What is the most likely cause?
- The user account is disabled
- The account lockout policy is enforced
- The user must change password at next logon is not selected
- The domain controller holding the PDC emulator role is offline (Correct answer)
Correct answer: The domain controller holding the PDC emulator role is offline
The PDC emulator processes password changes and account lockouts; if it is offline, recent password resets may not replicate in time and authentication fails.
Question 2: You want to prevent members of the Guests group from running Regedit.exe on Windows Server 2003. Which Group Policy setting should you configure?
- Software Restriction Policies (Correct answer)
- Account Lockout Policy
- Audit Policy
- Restricted Groups
Correct answer: Software Restriction Policies
Software Restriction Policies allow administrators to control which applications can run, including blocking specific executables like Regedit.exe.
Question 3: Which command-line tool would you use to transfer the RID Master FSMO role to another domain controller without using the GUI?
- Dcpromo
- Ntdsutil (Correct answer)
- Netdom
- Repadmin
Correct answer: Ntdsutil
Ntdsutil is the command-line utility used to seize or transfer FSMO roles between domain controllers.
Question 4: A volume shadow copy is configured on drive D. A user accidentally deletes a file. What is the fastest way to restore just that file without a full backup restore?
- Run ntbackup from the command line
- Use the Previous Versions tab in the file's properties (Correct answer)
- Restore from tape using ntbackup
- Re-create the file from the Recycle Bin
Correct answer: Use the Previous Versions tab in the file's properties
Volume Shadow Copy exposes previous versions of files through the Previous Versions tab, allowing granular single-file restores.
Question 5: You need to ensure that all computers in an OU automatically receive Windows updates without user intervention. Which GPO setting controls this?
- Configure Automatic Updates (Correct answer)
- Specify intranet Microsoft update service location
- Reschedule Automatic Updates scheduled installations
- No auto-restart for scheduled Automatic Updates installations
Correct answer: Configure Automatic Updates
The 'Configure Automatic Updates' policy controls whether updates are downloaded and installed automatically, and the installation schedule.
Question 6: Which Windows Server 2003 feature allows you to monitor the size of a user's home folder and send email notifications when a threshold is reached?
- Disk Quotas (Correct answer)
- Volume Shadow Copy
- Encrypting File System
- Distributed File System
Correct answer: Disk Quotas
Disk Quotas in Windows Server 2003 track per-user disk usage on NTFS volumes and can log events or deny additional space when limits are exceeded.
Question 7: You run 'net use * /delete' on a Windows Server 2003 machine. What is the result?
- All mapped network drives are disconnected (Correct answer)
- Only persistent drive mappings are removed
- The command fails because /delete is invalid with *
- All local drive letters are removed
Correct answer: All mapped network drives are disconnected
'net use * /delete' disconnects all current network drive mappings, both persistent and session-based.
MCSE Microsoft MCSE: 70-290 2
A user in the Sales OU cannot log on to any domain computer after a password reset.
Other users in the same OU log on successfully.
What is the most likely cause?